PT-2023-17190 · Unknown · Yoga Class Registration System

·

CVE-2023-1721

·

Publicado

2023-06-23

·

Atualizado

2023-09-21

CVSS v3.1

9.1

Crítica

VetorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Yoga Class Registration System version 1.0
Description The issue allows an administrator to execute commands on the server due to the application's failure to correctly validate the thumbnails of the classes uploaded by the administrators.
Recommendations For Yoga Class Registration System version 1.0, consider disabling the thumbnail upload feature for administrators until a patch is available to prevent potential command execution on the server. Restrict access to the server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-1721

Produtos afetados

Yoga Class Registration System